$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/BFCA7E1A721511EF9D7B9F3DC4F9AE02.roa File: BFCA7E1A721511EF9D7B9F3DC4F9AE02.roa (raw, json) Hash identifier: 65Etl/PSrdLKOSxLLhrIRRAhVTr5VbPe8mRTjKogYsA= Subject key identifier: 0B:D0:38:79:39:9E:5D:A0:66:91:1E:72:B5:8D:DB:C7:1C:DE:45:06 Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Certificate serial: 2B Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/BFCA7E1A721511EF9D7B9F3DC4F9AE02.roa Signing time: Fri 13 Sep 2024 21:18:41 +0000 ROA not before: Fri 13 Sep 2024 21:18:41 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 132879 IP address blocks: 202.29.22.0/24 maxlen: 24 2001:3c8:a702::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126 Validity Not Before: Sep 13 21:18:41 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66e4ac31-12ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e9:76:7a:73:f9:d5:42:03:37:ac:57:d3:ed: 41:d6:ef:0d:e8:b0:97:c8:6b:15:56:f6:9e:29:51: e5:12:9f:15:ee:8b:68:2a:49:3e:bc:a0:0e:ce:3c: a4:ca:87:fb:e7:fb:d5:34:73:27:85:2b:2a:8b:73: f2:3a:e7:03:e7:bc:42:95:24:34:00:65:fb:55:ad: 7b:cf:f6:1c:01:67:30:5d:e1:fa:d9:b3:45:c0:fc: ba:14:9f:f9:33:36:a6:2b:6e:46:77:11:33:da:e5: 7e:d7:84:b9:58:bb:43:10:63:96:32:e3:70:dc:6a: 82:38:b9:92:03:9b:71:99:58:59:74:85:55:02:98: d0:03:8c:2e:a4:8b:f7:17:de:54:22:32:6c:5d:c2: f8:d9:ca:32:65:b8:4b:1d:b1:58:f9:a7:c1:82:bd: b3:45:47:61:b1:1c:ac:f4:d4:f8:70:f6:bf:8e:42: 24:fc:99:96:d0:bd:b9:95:c7:61:56:8c:13:7c:cb: 84:24:94:a6:5a:ff:40:30:af:ad:a1:41:49:d4:6e: ae:af:89:bd:41:27:42:7e:61:2a:fc:b7:a7:dc:8b: c6:b3:f7:6e:62:d4:fb:f4:6d:02:af:f1:e0:00:1e: 26:73:8e:8f:67:67:c3:72:6b:3c:0e:52:95:2e:65: f4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D0:38:79:39:9E:5D:A0:66:91:1E:72:B5:8D:DB:C7:1C:DE:45:06 X509v3 Authority Key Identifier: keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/BFCA7E1A721511EF9D7B9F3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.29.22.0/24 IPv6: 2001:3c8:a702::/48 Signature Algorithm: sha256WithRSAEncryption 69:26:2d:6e:84:33:0a:28:1e:44:90:76:a4:8d:c8:a8:91:4a: 20:4c:20:b7:56:5e:c9:4f:30:9d:7d:3e:3c:98:88:ab:3c:53: 39:57:28:6f:5f:6f:af:4b:98:8d:46:c3:3c:9b:18:2c:1e:bf: 92:7f:f4:8a:7d:a2:45:16:9f:dd:dd:fa:7b:f1:8c:fb:69:ba: 25:35:eb:0d:13:8d:32:bc:80:bf:0f:5b:ed:83:52:92:43:f1: 8c:7a:82:a9:d2:ba:d0:67:c6:5f:1a:f7:cb:e4:92:6c:82:c1: ef:58:12:9b:24:43:0e:35:7a:ab:85:9e:56:42:30:05:4e:71: c9:c7:e9:1e:b6:4f:80:d9:c9:c2:f8:e7:6d:62:08:f4:d8:0c: 26:e7:65:6f:3a:2d:48:f7:8c:c2:ca:d3:00:a1:6e:66:ad:9f: 9f:d7:08:08:a9:4a:13:0d:23:06:33:d6:7a:31:83:bd:a8:ee: 52:ca:f6:cd:13:ef:15:8f:c1:69:ae:ff:34:38:68:46:a2:8d: 03:62:0f:36:db:b0:0d:29:d6:b0:bb:f8:ac:d0:c2:59:d1:dc: 16:f0:b3:3f:18:d7:bd:16:47:cf:be:7f:c2:82:e3:71:d5:62: 70:97:5b:e8:f0:39:68:28:8d:0d:c8:90:52:d1:a5:c3:ee:3b: ea:a2:d0:06 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QUVCMjExMC8GA1UEBRMoOUI5OEZCN0Q0Njg5ODNBMkMxNDc3MjczMzI0OEVGRkEz NDYyRTEyNjAeFw0yNDA5MTMyMTE4NDFaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZTRhYzMxLTEyZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDh6XZ6c/nVQgM3rFfT7UHW7w3osJfIaxVW9p4pUeUSnxXui2gqST68oA7OPKTK h/vn+9U0cyeFKyqLc/I65wPnvEKVJDQAZftVrXvP9hwBZzBd4frZs0XA/LoUn/kz NqYrbkZ3ETPa5X7XhLlYu0MQY5Yy43DcaoI4uZIDm3GZWFl0hVUCmNADjC6ki/cX 3lQiMmxdwvjZyjJluEsdsVj5p8GCvbNFR2GxHKz01Phw9r+OQiT8mZbQvbmVx2FW jBN8y4QklKZa/0Awr62hQUnUbq6vib1BJ0J+YSr8t6fci8az925i1Pv0bQKv8eAA HiZzjo9nZ8NyazwOUpUuZfQlAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUC9A4eTme XaBmkR5ytY3bxxzeRQYwHwYDVR0jBBgwFoAUm5j7fUaJg6LBR3JzMkjv+jRi4SYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBRUIyLzM5NTIxMDBFNkU4 MzExRUZBQjcyNjE4MEM0RjlBRTAyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRT WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTVqN2ZVYUpnNkxCUjNKek1ranYtalJpNFNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUVCMi8zOTUyMTAwRTZFODMxMUVGQUI3MjYxODBDNEY5QUUwMi9CRkNBN0UxQTcy MTUxMUVGOUQ3QjlGM0RDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAModFjAPBAIAAjAJAwcAIAEDyKcCMA0GCSqGSIb3DQEBCwUA A4IBAQBpJi1uhDMKKB5EkHakjciokUogTCC3Vl7JTzCdfT48mIirPFM5VyhvX2+v S5iNRsM8mxgsHr+Sf/SKfaJFFp/d3fp78Yz7abolNesNE40yvIC/D1vtg1KSQ/GM eoKp0rrQZ8ZfGvfL5JJsgsHvWBKbJEMONXqrhZ5WQjAFTnHJx+ketk+A2cnC+Odt Ygj02Awm52VvOi1I94zCytMAoW5mrZ+f1wgIqUoTDSMGM9Z6MYO9qO5SyvbNE+8V j8Fprv80OGhGoo0DYg8227ANKdawu/is0MJZ0dwW8LM/GNe9FkfPvn/CguNx1WJw l1vo8DloKI0NyJBS0aXD7jvqotAG -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:04 2024 by rpki-client on console-ams.rpki-client.org